> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape reveals significant threats and trends. Microsoft has patched two dozen remote code execution (RCE) flaws in Office, alongside other security issues, highlighting ongoing vulnerabilities in widely used software. A data breach at CenterPoint Energy has exposed personal information of over 1 million Texans, indicating continued risks for utility companies. Additionally, BeyondTrust has warned of a critical zero-day flaw in its Remote Support software, actively exploited since August. In a worrying trend, stolen AI API keys are being used for automated cyber scans, raising concerns about the misuse of legitimate technology. Lastly, the cybersecurity job market is experiencing a downturn, with postings hitting a four-year low, exacerbating the ongoing talent shortage in the field.
|
// AI-powered summary generated at 08:00
Kaspersky Lab research suggests companies blame competitors for DDoS attacks rather than disgruntled employees or political activists
Webmail account was even hacked last year
This blog has promoted control flow integrity (CFI) as a game changing security mitigation and encouraged its use. We wanted to take our own security advice and start securing software we use. To that end, we decided to apply CFI to facebook’s osquery, a cross-platform codebase with which we are dee...
News appeared on Thursday 2 March that Howard Schmidt had passed away following a long battle with cancer
Shenzhen-based DBL Technology patched but did not fix issue
I recently had the privilege of giving a keynote at BSidesLisbon. I had a great time at the conference, and I’d like to thank Bruno Morisson for inviting me. If you’re into port, this is the conference for you! I recommend that anyone in the area consider attending next year. I felt there was a […]
Major sites were affected for hours on Tuesday
Researchers from Fidelis Cybersecurity have unearthed an “interesting security issue” involving the popular messaging app Telegram
In my first blog post, I introduced the general structure of Binary Ninja’s Low Level IL (LLIL), as well as how to traverse and manipulate it with the Python API. Now, we’ll do something a little more interesting. Reverse engineering binaries compiled from object-oriented languages can be challengin...
IOActive reveals security vulnerabilities in multiple systems
The Institute of Information Security Professionals (IISP) has officially applied to the privy council for a Royal Charter
Hi, I’m Josh. I recently joined the team at Trail of Bits, and I’ve been an evangelist and plugin writer for the Binary Ninja reversing platform for a while now. I’ve developed plugins that make reversing easier and extended Binary Ninja’s architecture support to assist in playing the microcorruptio...
Attackers suspected of being part of a much larger operation
Latest campaign an 'evolution' from MongoDB attacks
Another connected toy platform found to have insufficient security
The hackers believed to be behind the election-season hacking in the United States may have now set their sights on Japan.
Insider sent spreadsheet to his wife
Necurs is not only a spambot, it is a modular piece of malware that can add new capabilities at any time.
More than a third of firms have experienced some information loss, theft or attack via email within the past two years.
Defence minister says cyber troops are spreading propaganda